Vulnerabilidades do Bmc Control-M/Server
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Bmc Control-M/Server: 2 registro(s), com versões afetadas e correções.
CVE-2026-10539
Crítica · 9.0
CWE-305 01/07/2026
Unauthenticated command injection in Control-M/Server communication command
A Control-M/Server communication command does not sufficiently filter or sanitize user-supplied input. Under certain conditions, this issue may allow an unauthenticated attacker to execute unauthorized commands on the affected server, potentially leading to compromise of the server.
This vulnerability affects Control-M/Server versions 9.0.20.x to 9.0.21.200 (included) and potentially earlier unsupported versions.
CVE-2026-10538
Alta · 8.0
CWE-502 01/07/2026
Improper deserialization handling in Control-M Components
Messaging consumer functionality allows deserialization of user-controlled data without sufficient restriction of allowed object types in the out of support Control-M/Server and Control-M/Enterprise Manager versions 9.0.20.x and potentially earlier. This issue may allow an authenticated attacker to trigger unintended server-side behavior through crafted serialized content.